cat > \/root\/install-xray-reality-nat.sh <<‘EOF’
\n#!\/bin\/sh
\nset -e<\/p>\n
clear
\necho “============================================================”
\necho ” Alpine NAT TCP \u4e00\u952e\u5b89\u88c5 Xray VLESS Reality”
\necho ” \u9002\u5408\uff1aNAT VPS \u53ea\u652f\u6301 TCP \u7aef\u53e3\u6620\u5c04\u7684\u573a\u666f”
\necho “============================================================”
\necho “”<\/p>\n
input_required() {
\nPROMPT=”$1″
\nVAR_NAME=”$2″<\/p>\n
while true; do
\nprintf “%s” “$PROMPT”
\nread VALUE
\nif [ -n “$VALUE” ]; then
\neval “$VAR_NAME=\\”\\$VALUE\\””
\nbreak
\nfi
\necho “\u4e0d\u80fd\u4e3a\u7a7a\uff0c\u8bf7\u91cd\u65b0\u8f93\u5165\u3002”
\ndone
\n}<\/p>\n
input_optional() {
\nPROMPT=”$1″
\nDEFAULT_VALUE=”$2″
\nVAR_NAME=”$3″<\/p>\n
printf “%s” “$PROMPT”
\nread VALUE
\nif [ -z “$VALUE” ]; then
\nVALUE=”$DEFAULT_VALUE”
\nfi
\neval “$VAR_NAME=\\”\\$VALUE\\””
\n}<\/p>\n
check_port() {
\nPORT=”$1″
\nNAME=”$2″<\/p>\n
case “$PORT” in
\n”|*[!0-9]*)
\necho “\u9519\u8bef\uff1a${NAME} \u5fc5\u987b\u662f\u6570\u5b57\u7aef\u53e3”
\nexit 1
\n;;
\nesac<\/p>\n
if [ “$PORT” -lt 1 ] || [ “$PORT” -gt 65535 ]; then
\necho “\u9519\u8bef\uff1a${NAME} \u5fc5\u987b\u5728 1-65535 \u4e4b\u95f4”
\nexit 1
\nfi
\n}<\/p>\n
input_required “\u8bf7\u8f93\u5165\u516c\u7f51 IP \u6216\u57df\u540d\uff0c\u4f8b\u5982 hinet-1.lazycat.cv: ” DOMAIN
\ninput_required “\u8bf7\u8f93\u5165\u516c\u7f51\u7aef\u53e3\uff0c\u4f8b\u5982 11112: ” PUBLIC_PORT
\ninput_required “\u8bf7\u8f93\u5165\u6620\u5c04\u7684\u5185\u90e8\u7aef\u53e3\uff0c\u4f8b\u5982 90: ” LOCAL_PORT
\ninput_optional “\u8bf7\u8f93\u5165 Reality \u4f2a\u88c5\u57df\u540d SNI\uff0c\u9ed8\u8ba4 www.microsoft.com: ” “www.microsoft.com” SNI
\ninput_optional “\u8bf7\u8f93\u5165\u8282\u70b9\u540d\u79f0\uff0c\u9ed8\u8ba4 NAT-VLESS-Reality: ” “NAT-VLESS-Reality” NAME<\/p>\n
check_port “$PUBLIC_PORT” “\u516c\u7f51\u7aef\u53e3”
\ncheck_port “$LOCAL_PORT” “\u5185\u90e8\u7aef\u53e3”<\/p>\n
DEST=”${SNI}:443″<\/p>\n
echo “”
\necho “================= \u914d\u7f6e\u4fe1\u606f\u786e\u8ba4 =================”
\necho “\u516c\u7f51\u5730\u5740: ${DOMAIN}”
\necho “\u516c\u7f51\u7aef\u53e3: ${PUBLIC_PORT}”
\necho “\u5185\u90e8\u7aef\u53e3: ${LOCAL_PORT}”
\necho “Reality SNI: ${SNI}”
\necho “Reality Dest: ${DEST}”
\necho “\u8282\u70b9\u540d\u79f0: ${NAME}”
\necho “================================================”
\necho “”<\/p>\n
printf “\u786e\u8ba4\u5b89\u88c5\uff1f\u8f93\u5165 y \u7ee7\u7eed: ”
\nread CONFIRM<\/p>\n
if [ “$CONFIRM” != “y” ] && [ “$CONFIRM” != “Y” ]; then
\necho “\u5df2\u53d6\u6d88\u5b89\u88c5\u3002”
\nexit 0
\nfi<\/p>\n
echo “”
\necho “>>> \u5b89\u88c5\u4f9d\u8d56…”
\napk update
\napk add –no-cache curl wget unzip openssl ca-certificates iproute2 sed grep coreutils openrc<\/p>\n
echo “>>> \u505c\u6b62\u65e7 xray…”
\nrc-service xray stop >\/dev\/null 2>&1 || true
\nrc-update del xray default >\/dev\/null 2>&1 || true<\/p>\n
echo “>>> \u51c6\u5907\u76ee\u5f55…”
\nmkdir -p \/usr\/local\/bin \/usr\/local\/etc\/xray \/var\/log\/xray \/tmp\/xray-install \/run
\ncd \/tmp\/xray-install
\nrm -rf .\/*<\/p>\n
echo “>>> \u68c0\u6d4b\u7cfb\u7edf\u67b6\u6784…”
\nARCH=”$(uname -m)”<\/p>\n
case “$ARCH” in
\nx86_64|amd64)
\nXRAY_ZIP=”Xray-linux-64.zip”
\n;;
\naarch64|arm64)
\nXRAY_ZIP=”Xray-linux-arm64-v8a.zip”
\n;;
\narmv7l|armv7)
\nXRAY_ZIP=”Xray-linux-arm32-v7a.zip”
\n;;
\narmv6l|armv6)
\nXRAY_ZIP=”Xray-linux-arm32-v6.zip”
\n;;
\ni386|i686)
\nXRAY_ZIP=”Xray-linux-32.zip”
\n;;
\n*)
\necho “\u9519\u8bef\uff1a\u6682\u4e0d\u652f\u6301\u7684\u67b6\u6784: $ARCH”
\nexit 1
\n;;
\nesac<\/p>\n
echo “>>> \u4e0b\u8f7d Xray: ${XRAY_ZIP}”
\nwget -O xray.zip “https:\/\/github.com\/XTLS\/Xray-core\/releases\/latest\/download\/${XRAY_ZIP}”<\/p>\n
echo “>>> \u89e3\u538b\u5b89\u88c5 Xray…”
\nunzip -o xray.zip
\ninstall -m 755 xray \/usr\/local\/bin\/xray<\/p>\n
if [ -f geoip.dat ]; then
\ninstall -m 644 geoip.dat \/usr\/local\/etc\/xray\/geoip.dat
\nfi<\/p>\n
if [ -f geosite.dat ]; then
\ninstall -m 644 geosite.dat \/usr\/local\/etc\/xray\/geosite.dat
\nfi<\/p>\n
echo “>>> \u751f\u6210 UUID…”
\nUUID=”$(\/usr\/local\/bin\/xray uuid | tr -d ‘\\r\\n ‘)”<\/p>\n
echo “>>> \u751f\u6210 Reality \u5bc6\u94a5…”
\nKEYS=”$(\/usr\/local\/bin\/xray x25519)”<\/p>\n
PRIVATE_KEY=”$(printf ‘%s\\n’ “$KEYS” | sed -n ‘s\/^PrivateKey:[[:space:]]*\/\/p; s\/^Private key:[[:space:]]*\/\/Ip’ | head -n 1 | tr -d ‘\\r\\n ‘)”
\nPUBLIC_KEY=”$(printf ‘%s\\n’ “$KEYS” | sed -n ‘s\/^Password (PublicKey):[[:space:]]*\/\/p; s\/^PublicKey:[[:space:]]*\/\/p; s\/^Public key:[[:space:]]*\/\/Ip’ | head -n 1 | tr -d ‘\\r\\n ‘)”<\/p>\n
SHORT_ID=”$(openssl rand -hex 8 | tr -d ‘\\r\\n ‘)”<\/p>\n
echo “>>> \u68c0\u67e5\u751f\u6210\u7ed3\u679c…”<\/p>\n
if [ -z “$UUID” ]; then
\necho “\u9519\u8bef\uff1aUUID \u4e3a\u7a7a”
\nexit 1
\nfi<\/p>\n
if [ -z “$PRIVATE_KEY” ]; then
\necho “\u9519\u8bef\uff1aPrivateKey \u4e3a\u7a7a”
\necho “xray x25519 \u539f\u59cb\u8f93\u51fa\u5982\u4e0b\uff1a”
\nprintf ‘%s\\n’ “$KEYS”
\nexit 1
\nfi<\/p>\n
if [ -z “$PUBLIC_KEY” ]; then
\necho “\u9519\u8bef\uff1aPublicKey \u4e3a\u7a7a”
\necho “xray x25519 \u539f\u59cb\u8f93\u51fa\u5982\u4e0b\uff1a”
\nprintf ‘%s\\n’ “$KEYS”
\nexit 1
\nfi<\/p>\n
if [ -z “$SHORT_ID” ]; then
\necho “\u9519\u8bef\uff1aShortId \u4e3a\u7a7a”
\nexit 1
\nfi<\/p>\n
echo “UUID: ${UUID}”
\necho “PublicKey: ${PUBLIC_KEY}”
\necho “ShortId: ${SHORT_ID}”<\/p>\n
echo “>>> \u5199\u5165 Xray \u914d\u7f6e…”
\ncat > \/usr\/local\/etc\/xray\/config.json <<XRAYCONF
\n{
\n“log”: {
\n“loglevel”: “warning”,
\n“access”: “\/var\/log\/xray\/access.log”,
\n“error”: “\/var\/log\/xray\/error.log”
\n},
\n“inbounds”: [
\n{
\n“tag”: “vless-reality-in”,
\n“listen”: “0.0.0.0”,
\n“port”: ${LOCAL_PORT},
\n“protocol”: “vless”,
\n“settings”: {
\n“clients”: [
\n{
\n“id”: “${UUID}”
\n}
\n],
\n“decryption”: “none”
\n},
\n“streamSettings”: {
\n“network”: “tcp”,
\n“security”: “reality”,
\n“realitySettings”: {
\n“show”: false,
\n“dest”: “${DEST}”,
\n“xver”: 0,
\n“serverNames”: [
\n“${SNI}”
\n],
\n“privateKey”: “${PRIVATE_KEY}”,
\n“shortIds”: [
\n“${SHORT_ID}”
\n]
\n}
\n}
\n}
\n],
\n“outbounds”: [
\n{
\n“protocol”: “freedom”,
\n“tag”: “direct”
\n}
\n]
\n}
\nXRAYCONF<\/p>\n
echo “>>> \u5199\u5165 OpenRC \u670d\u52a1…”
\ncat > \/etc\/init.d\/xray <<‘OPENRC’
\n#!\/sbin\/openrc-run<\/p>\n
name=”xray”
\ncommand=”\/usr\/local\/bin\/xray”
\ncommand_args=”run -config \/usr\/local\/etc\/xray\/config.json”
\ncommand_background=”yes”
\npidfile=”\/run\/xray.pid”
\noutput_log=”\/var\/log\/xray\/xray.log”
\nerror_log=”\/var\/log\/xray\/xray.err”<\/p>\n
depend() {
\nneed net
\n}
\nOPENRC<\/p>\n
chmod +x \/etc\/init.d\/xray<\/p>\n
echo “>>> \u68c0\u67e5 Xray \u914d\u7f6e…”
\n\/usr\/local\/bin\/xray run -test -config \/usr\/local\/etc\/xray\/config.json<\/p>\n
echo “>>> \u542f\u52a8 Xray…”
\nrc-update add xray default >\/dev\/null 2>&1 || true
\nrc-service xray restart<\/p>\n
sleep 1<\/p>\n
echo “>>> \u68c0\u67e5\u76d1\u542c\u7aef\u53e3…”
\nif ! ss -lntp | grep “:${LOCAL_PORT}” >\/dev\/null 2>&1; then
\necho “\u9519\u8bef\uff1aXray \u6ca1\u6709\u76d1\u542c ${LOCAL_PORT} \u7aef\u53e3”
\necho “\u8bf7\u67e5\u770b\u65e5\u5fd7\uff1a”
\necho “cat \/var\/log\/xray\/error.log”
\necho “cat \/var\/log\/xray\/xray.err”
\nexit 1
\nfi<\/p>\n
VLESS_LINK=”vless:\/\/${UUID}@${DOMAIN}:${PUBLIC_PORT}?encryption=none&security=reality&sni=${SNI}&fp=chrome&pbk=${PUBLIC_KEY}&sid=${SHORT_ID}&spx=%2F&type=tcp&headerType=none#${NAME}”<\/p>\n
echo “$VLESS_LINK” > \/root\/vless-link.txt<\/p>\n
cat > \/root\/vless-info.txt <<INFO
\n\u8282\u70b9\u540d\u79f0: ${NAME}
\n\u5730\u5740: ${DOMAIN}
\n\u516c\u7f51\u7aef\u53e3: ${PUBLIC_PORT}
\nUUID: ${UUID}
\n\u52a0\u5bc6: none
\n\u4f20\u8f93\u534f\u8bae: tcp
\nTLS: reality
\nSNI: ${SNI}
\nFingerprint: chrome
\nPublicKey: ${PUBLIC_KEY}
\nShortId: ${SHORT_ID}
\nSpiderX: \/
\nFlow: \u7559\u7a7a
\n\u5185\u90e8\u76d1\u542c\u7aef\u53e3: ${LOCAL_PORT}
\nNAT \u6620\u5c04\u8981\u6c42: TCP ${PUBLIC_PORT} -> ${LOCAL_PORT}
\nINFO<\/p>\n
echo “”
\necho “============================================================”
\necho “\u5b89\u88c5\u5b8c\u6210”
\necho “============================================================”
\necho “”
\necho “\u8bf7\u786e\u8ba4 NAT \u9762\u677f\u6620\u5c04\u4e3a\uff1a”
\necho “”
\necho “TCP ${PUBLIC_PORT} -> ${LOCAL_PORT}”
\necho “”
\necho “============================================================”
\necho “\u590d\u5236\u4e0b\u9762\u8fd9\u4e00\u6574\u884c\u5230 v2rayN \/ v2rayNG \u5bfc\u5165\uff1a”
\necho “============================================================”
\necho “”
\ncat \/root\/vless-link.txt
\necho “”
\necho “”
\necho “============================================================”
\necho “\u624b\u52a8\u586b\u5199\u4fe1\u606f\uff1a”
\necho “============================================================”
\ncat \/root\/vless-info.txt
\necho “============================================================”
\necho “”
\necho “\u5e38\u7528\u547d\u4ee4\uff1a”
\necho “\u67e5\u770b\u94fe\u63a5: cat \/root\/vless-link.txt”
\necho “\u67e5\u770b\u53c2\u6570: cat \/root\/vless-info.txt”
\necho “\u67e5\u770b\u72b6\u6001: rc-service xray status”
\necho “\u67e5\u770b\u76d1\u542c: ss -lntp | grep ‘:${LOCAL_PORT}'”
\necho “\u67e5\u770b\u9519\u8bef\u65e5\u5fd7: cat \/var\/log\/xray\/error.log”
\necho “\u67e5\u770b\u670d\u52a1\u65e5\u5fd7: cat \/var\/log\/xray\/xray.err”
\necho “\u91cd\u542f\u670d\u52a1: rc-service xray restart”
\necho “\u505c\u6b62\u670d\u52a1: rc-service xray stop”
\necho “============================================================”
\nEOF<\/p>\n
chmod +x \/root\/install-xray-reality-nat.sh
\nsh \/root\/install-xray-reality-nat.sh<\/p>\n","protected":false},"excerpt":{"rendered":"
cat > \/root\/install-xray-reality-nat.sh <<R […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[],"tags":[],"class_list":["post-940","post","type-post","status-publish","format-standard","hentry"],"_links":{"self":[{"href":"https:\/\/me.spacelite.top\/index.php?rest_route=\/wp\/v2\/posts\/940","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/me.spacelite.top\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/me.spacelite.top\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/me.spacelite.top\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/me.spacelite.top\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=940"}],"version-history":[{"count":4,"href":"https:\/\/me.spacelite.top\/index.php?rest_route=\/wp\/v2\/posts\/940\/revisions"}],"predecessor-version":[{"id":945,"href":"https:\/\/me.spacelite.top\/index.php?rest_route=\/wp\/v2\/posts\/940\/revisions\/945"}],"wp:attachment":[{"href":"https:\/\/me.spacelite.top\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=940"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/me.spacelite.top\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=940"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/me.spacelite.top\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=940"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}